Ampcus, Inc
Incident Manager - III - IMG03
Ampcus, Inc, Arlington, Virginia, United States, 22201
Incident Manager - III - IMG03
Hybrid in Arlington, VA - Multi Year Salaried ContractMust Have TS Clearance
Our client is supporting a U.S. Government customer to provide cybersecurity vulnerability analysis support to reduce the prevalence and impact of vulnerabilities and exploitable conditions across Federal Civilian Executive Branch (FCEB) entities and Critical Infrastructure Key Resources (CIKR). The Cybersecurity Vulnerability Analyst utilizes cybersecurity best practices, risk management techniques, critical thinking, and strong analytical skills to analyze information from multiple sources, synthesize that information, and provide expert analysis to senior customer stakeholders.
Responsibilities:
Utilize creativity and divergent thinking to assess and explain the impact of cybersecurity vulnerabilities on FCEB and CIKR security posturesConduct prevalence and sector analysis of vulnerabilities with Attack Surface Management toolsReview vulnerability reporting to identify potential risks and impacts CIKR and FCEB entitiesMaintain awareness of technical capabilities of Vulnerability Management (VM) Subdivision operational componentsEvaluate technical requirements of VM operational components and recommend paths forwardUnderstand and articulate the impact of vulnerabilities to organizationsCoordinate with VM analysts and leadership to synchronize VM operational activitiesCoordinate with broader Cybersecurity Division (CSD) analysts and leadership to understand CSD operational priorities and activitiesWillingness, ability, and flexibility to assist the government to standup this new mission operations area within VMDemonstrated ability to contribute to developing Standard Operating Procedures and Work Instructions as requiredDemonstrated ability to contribute to weekly operation summaries, intelligence analysis summaries, and other cyber intelligence reports
Required Skills:
U.S. CitizenshipMust have an active TS/SCI clearanceMust be able to obtain Client Suitability5+ years of directly relevant experienceExperience as a hands-on cybersecurity analyst (i.e. SOC Analyst or Penetration Tester) is requiredExperience with the analysis and characterization of cyber attacksSkilled in identifying different classes of attacks and attack stagesKnowledge of system and application security threats and vulnerabilitiesKnowledge of basic networking protocols, including TCP/IP, UDP, HTTP/HTTPS, SSH, and DNS, and open security standards and projects, including OWASPKnowledge of CVSS and KEV scoring methodologyKnowledge of general attack stages (e.g., foot printing and scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks, etc.)Knowledge of VM scanning, Web Application scanning, and red team processesExperience recognizing and categorizing types of vulnerabilities and associated attacksKnowledge of Computer Network Defense policies, procedures, and regulationsKnowledge of different operational threat environments (e.g., first generation [script kiddies], second generation [non nation-state sponsored], and third generation [nation-state sponsored])Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, PL/SQL and injections, race conditions, covert channel, replay, return-oriented attacks, and malicious code)Experience in developing and delivering technical briefingsMust be able to work collaboratively across physical and virtual locations
Desired Skills:
Understanding of OT/ICS/SCADA technologies and associated vulnerabilitiesExperience with conducting all-source researchUnderstanding of MITRE Adversary Tactics, Techniques and Common Knowledge (Telecommunication&CK)Experience with:SharePointServiceNowPalo Alto Networks Cortex Xpanse
Required Experience Education:
BS Computer Science, Computer Engineering, Computer Information Systems, Cybersecurity, or related degree, or 7+ years experience in cyber incident management experience or cybersecurity experience with a High school diploma.
Desired Certifications:
* CompTIA Security+, CEH, CISSP, CISM, CISA, CCSP, CIPP, CPT, CCSS
Please send your resume to janice.dicicco@ampcus.com
#J-18808-Ljbffr
Hybrid in Arlington, VA - Multi Year Salaried ContractMust Have TS Clearance
Our client is supporting a U.S. Government customer to provide cybersecurity vulnerability analysis support to reduce the prevalence and impact of vulnerabilities and exploitable conditions across Federal Civilian Executive Branch (FCEB) entities and Critical Infrastructure Key Resources (CIKR). The Cybersecurity Vulnerability Analyst utilizes cybersecurity best practices, risk management techniques, critical thinking, and strong analytical skills to analyze information from multiple sources, synthesize that information, and provide expert analysis to senior customer stakeholders.
Responsibilities:
Utilize creativity and divergent thinking to assess and explain the impact of cybersecurity vulnerabilities on FCEB and CIKR security posturesConduct prevalence and sector analysis of vulnerabilities with Attack Surface Management toolsReview vulnerability reporting to identify potential risks and impacts CIKR and FCEB entitiesMaintain awareness of technical capabilities of Vulnerability Management (VM) Subdivision operational componentsEvaluate technical requirements of VM operational components and recommend paths forwardUnderstand and articulate the impact of vulnerabilities to organizationsCoordinate with VM analysts and leadership to synchronize VM operational activitiesCoordinate with broader Cybersecurity Division (CSD) analysts and leadership to understand CSD operational priorities and activitiesWillingness, ability, and flexibility to assist the government to standup this new mission operations area within VMDemonstrated ability to contribute to developing Standard Operating Procedures and Work Instructions as requiredDemonstrated ability to contribute to weekly operation summaries, intelligence analysis summaries, and other cyber intelligence reports
Required Skills:
U.S. CitizenshipMust have an active TS/SCI clearanceMust be able to obtain Client Suitability5+ years of directly relevant experienceExperience as a hands-on cybersecurity analyst (i.e. SOC Analyst or Penetration Tester) is requiredExperience with the analysis and characterization of cyber attacksSkilled in identifying different classes of attacks and attack stagesKnowledge of system and application security threats and vulnerabilitiesKnowledge of basic networking protocols, including TCP/IP, UDP, HTTP/HTTPS, SSH, and DNS, and open security standards and projects, including OWASPKnowledge of CVSS and KEV scoring methodologyKnowledge of general attack stages (e.g., foot printing and scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks, etc.)Knowledge of VM scanning, Web Application scanning, and red team processesExperience recognizing and categorizing types of vulnerabilities and associated attacksKnowledge of Computer Network Defense policies, procedures, and regulationsKnowledge of different operational threat environments (e.g., first generation [script kiddies], second generation [non nation-state sponsored], and third generation [nation-state sponsored])Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, PL/SQL and injections, race conditions, covert channel, replay, return-oriented attacks, and malicious code)Experience in developing and delivering technical briefingsMust be able to work collaboratively across physical and virtual locations
Desired Skills:
Understanding of OT/ICS/SCADA technologies and associated vulnerabilitiesExperience with conducting all-source researchUnderstanding of MITRE Adversary Tactics, Techniques and Common Knowledge (Telecommunication&CK)Experience with:SharePointServiceNowPalo Alto Networks Cortex Xpanse
Required Experience Education:
BS Computer Science, Computer Engineering, Computer Information Systems, Cybersecurity, or related degree, or 7+ years experience in cyber incident management experience or cybersecurity experience with a High school diploma.
Desired Certifications:
* CompTIA Security+, CEH, CISSP, CISM, CISA, CCSP, CIPP, CPT, CCSS
Please send your resume to janice.dicicco@ampcus.com
#J-18808-Ljbffr